
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
File: 7qiugNcT5rItsOxgkVfwxZpS_X8.mft (raw, json)
Hash identifier: 6VAkE6OkQ7NQCvKorpik+TU8kzF1uhynEzT4NwDaZJM=
Subject key identifier: 3B:4D:C3:92:81:EF:12:AB:1C:C7:51:B2:F7:A2:92:6A:B8:64:52:3D
Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
Certificate issuer: /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Certificate serial: 360E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
Manifest number: 35BE
Signing time: Mon 28 Sep 2026 14:51:24 +0000
Manifest this update: Mon 28 Sep 2026 14:51:23 +0000
Manifest next update: Mon 05 Oct 2026 14:51:23 +0000
Files and hashes: 1: 7qiugNcT5rItsOxgkVfwxZpS_X8.crl (hash: mBd2dAKRxqekeA0kilhKHtN489BH459SVWFWB3U1LQM=)
2: 6C0C85D0A43011ECA230771BC4F9AE02.roa (hash: XMDinqojg8A6VfOUYX1iK27264aRErFSa0yq2TM1+Qo=)
3: 2A73A3403A0711F081048A4EC4F9AE02.roa (hash: dvlRe6H3F8B2GwYIE840UeTvVO5dQ86LFZ7LGPZOm2k=)
4: 2ACF9E0C855C11EB8C076013C4F9AE02.roa (hash: RNuWwl4ucRlwsOZtGnFpFuiswJzOcCNas2gxr3gm8mE=)
5: 4502F6FC898911F181677A9E3411F970.roa (hash: DV9flv0sK24RVrPl6tLWy4gJnamvUt4xz+f3P0icutI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 14:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13838 (0x360e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6B7, serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Validity
Not Before: Sep 28 14:51:23 2026 GMT
Not After : Oct 5 14:51:23 2026 GMT
Subject: CN=6aba7eeb-0444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:1c:f9:27:97:4b:e0:03:1e:08:d1:ef:50:
8a:6e:19:06:6b:13:33:0d:72:52:c1:70:9c:cd:53:
5b:dc:d9:23:fa:49:28:73:68:9f:4d:db:ca:69:b0:
2c:ac:a9:69:06:2d:82:90:ea:5a:60:63:a0:03:cc:
14:4e:c3:a6:42:af:73:5e:4d:42:c0:66:8c:71:a9:
1e:19:09:ac:65:b6:ed:25:e2:06:a6:ef:86:d9:f1:
e9:d2:af:e7:4a:76:5f:ba:2b:b6:7e:a4:0b:13:19:
19:40:45:39:5c:69:58:f2:f5:91:86:98:1c:aa:f8:
d7:c5:f7:7c:d0:a5:81:7e:18:12:e4:b5:7c:20:e9:
01:8b:ef:ad:c2:ad:90:f7:9f:91:66:74:66:51:f8:
f8:ea:98:65:a3:c7:e5:fd:e8:2a:ec:b2:ea:4d:32:
4d:24:ab:e2:ba:a6:47:2a:e2:c6:af:0e:99:86:d8:
e2:cd:20:09:f3:d0:dd:82:01:dc:18:18:01:9b:63:
92:6f:ae:37:72:15:27:03:c6:95:7f:5c:de:67:fb:
c8:8d:6a:6b:82:cf:7b:13:d0:14:a1:95:df:0b:18:
15:0b:88:df:03:51:de:ad:05:11:e7:1b:c9:d9:99:
40:58:46:a6:88:cf:c0:8d:c7:53:9a:37:63:d3:e3:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4D:C3:92:81:EF:12:AB:1C:C7:51:B2:F7:A2:92:6A:B8:64:52:3D
X509v3 Authority Key Identifier:
keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:20:7d:e9:9f:9f:95:d2:6c:ad:78:3f:84:93:f5:db:0c:61:
25:d6:9a:c2:9e:95:48:e2:91:96:66:b8:c0:d8:cb:3c:6b:ec:
71:c3:30:db:6a:63:5e:67:c7:88:01:94:df:4e:62:9f:df:98:
bc:73:10:e4:50:40:d3:8c:53:fe:94:b6:31:91:6c:e9:a9:a8:
90:25:df:01:f1:2c:78:c2:86:cc:cc:f3:a6:1f:9c:8f:d1:3a:
2d:b0:bb:c7:ae:8f:2f:dc:08:6f:fe:ac:ce:65:87:09:b7:6f:
54:0e:f6:ad:d5:f5:09:46:a4:5a:a5:a7:52:05:36:86:38:31:
3e:bf:b1:d0:d0:31:1e:58:8c:1a:8f:1d:64:c2:b9:29:42:44:
65:38:f0:e9:dd:3b:55:39:66:ad:f5:da:e7:3c:6a:75:7f:8b:
9c:20:a3:3a:5c:cb:70:b8:40:3f:0e:29:7a:98:b5:45:e7:e0:
57:96:5b:fb:36:ac:13:1f:51:70:03:11:55:4a:82:ea:fc:f5:
b2:92:50:25:c8:4a:0b:96:f3:02:f8:b7:1e:29:42:81:13:3b:
a4:9a:ea:8e:95:9c:56:1a:f4:2b:ff:44:4f:55:af:f1:db:b5:
e1:ae:25:7b:1a:5d:90:cd:ba:87:5d:9f:f7:e4:2f:4b:2a:ab:
ce:b9:a6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:23:53 2026 by rpki-client